Simple Network Management Protocol

 grabs statistic from devices

 Object ID (OIDs management information base) for everything

Monitoring applications
 MRTG (Open Source)
 PRTG
 Solarwinds
 Openview (HP)
 Cisco works

SNMP versions
v1
v2c - defacto standard
- community string ro/rw access
- simplicity but lacks security
v3 - user-base authentication
- encryption
- snmp group defines certain sensors on the device that could be used
For basic/advanced monitoring

Configuring SNMPv2:
R1(config)# snmp-server community CISCO ro

On PRTG:
Devices/Local Probe
- Right-Click
- Select add Device

Add Device in Group Local probe

Device Name:
IP Version:
IPv4-Address/DNS Name:
Device Icon:
Device Type
Sensor Management
* Automatic device Identification (standard, recommended)

Credentials for SNMP Devices

inherit from (unchecked)
SNMP Version
* v2c
Community String "CISCO"
Note: You can add sensors such as Ping, CPU, Free Memory, Uptime and Bandwidth

SNMPv3 Configuration
  There are three elements that you have to put in place in order for snmpv3
monitoring to work
o View – restrict what somebody is able to see
o Group – identifies the authentication and encryption method to use
o User – provides the actual credentials that you put into your
monitoring system to monitor your device

Configuring SNMPv3
R1(config)#snmp-server view VIEW iso included
Note: You may Search for Cisco SNMP Object Navigator
R1(config)#snmp-server group MONITOR v3 priv read VIEW
Note: priv authentication with encryption
R1(config)#snmp-server user USER group MONITOR v3 auth sha USERpass priv des56 cisco
Note: “cisco” pre-shared key

ON PRTG:
Add Device
Name:
IP Address:
Icon:
Device Type:
Manual
Credential For:
v3
Athentication
User: user
Password: USERpass
encryption type: des
encryption key: cisco
contact name

Right-Click on monitored device

Auto-Discover/Run Auto-Discovery

Capturing Syslog
 syslog captures key status message from Cisco Devices
 each device can store syslog messages locally or on a remote server
 syslog uses udp port 514

Syslog tool:
 Kiwi syslogs
 splunk

Configuration:
R1(config)# logging x.x.x.x
R1(config)# logging trap notifications

NetFlow
  netflow tracks the flows on the net
 traffic accounting:
 per ip address
 per protocol
 per port
 no default port number (unique port per device)

Configuration:
R1(config)# ip flow-export destination x.x.x.x 9991
R1(config)# ip flow-export version 9
R1(config)# interface fa0/0
R1(config-if)# ip flow ingress
R1(config-if)# ip flow egress

On PRTG:
Add Sensor
Search directly
netflow
version9

Basic Sensor Settings

Sensor Name: NetFlow "R1"
NetFlow 9 Specific Settings
Receive NetFlow: 9991
Active Flow timeout: 15

IP SLA
------

Probe: 1
R1(config)# ip sla 1
R1(config-ip-sla)#icmp-echo x.x.x.x
R1(config-ip-sla-echo)#timeout 1000 ##(miliseconds)
R1(config-ip-sla-echo)# frequency 3 ##(default 60 seconds)
R1(config-ip-sla-echo)# request-data-size 200 ##(in bytes)
R1(config-ip-sla-echo)# exit

Verification:
show running-config | section sla

Probe: 2
R1(config)# ip sla 2
R1(config-ip-sla)#icmp-echo x.x.x.x
R1(config-ip-sla-echo)#timeout 1000 ##(miliseconds)
R1(config-ip-sla-echo)# frequency 3 ##(default 60 seconds)
R1(config-ip-sla-echo)# request-data-size 200 ##(in bytes)
R1(config-ip-sla-echo)# exit

running sla:
R1(config)# ip sla schedule 1 life forever start-time now
R1(config)# ip sla schedule 2 life forever start-time now
R1#show ip sla statistics

Beyond CCNA Configuration:

R1(config)# track 1 rtr 1 ###respons time reporter old name of sla
R1(config)# track 2 rtr 2
R1# show running-config | include track
R1(config)# ip route x.x.x.x x.x.x.x x.x.x.x track 1
R1(config)# ip route x.x.x.x x.x.x.x x.x.x.x track 2